This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8zmZiVYsOJjjWalmToNwv5KeTuQ.roa File: 8zmZiVYsOJjjWalmToNwv5KeTuQ.roa (raw, json) Hash identifier: 3yZXuEEptPOg82GJ9ZfK/MvmAsa3K9oizD4Lbs1oLqA= Subject key identifier: F3:39:99:89:56:2C:38:98:E3:59:A9:66:4E:83:70:BF:92:9E:4E:E4 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019A7CBD157A22DD9066E989AD920905F0C1 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8zmZiVYsOJjjWalmToNwv5KeTuQ.roa Signing time: Thu 13 Nov 2025 10:22:37 +0000 ROA not before: Thu 13 Nov 2025 10:22:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26383 IP address blocks: 62.76.232.0/24 maxlen: 24 62.76.234.0/24 maxlen: 24 62.76.238.0/24 maxlen: 24 62.76.239.0/24 maxlen: 24 192.124.175.0/24 maxlen: 24 192.124.176.0/24 maxlen: 24 192.124.209.0/24 maxlen: 24 193.108.112.0/24 maxlen: 24 193.124.2.0/24 maxlen: 24 193.124.22.0/24 maxlen: 24 193.124.41.0/24 maxlen: 24 193.124.46.0/24 maxlen: 24 194.58.38.0/24 maxlen: 24 194.58.39.0/24 maxlen: 24 194.58.40.0/24 maxlen: 24 194.58.59.0/24 maxlen: 24 194.58.66.0/24 maxlen: 24 194.58.68.0/24 maxlen: 24 194.87.2.0/24 maxlen: 24 194.87.10.0/24 maxlen: 24 194.87.17.0/24 maxlen: 24 194.87.18.0/24 maxlen: 24 194.87.23.0/24 maxlen: 24 194.87.30.0/24 maxlen: 24 194.87.39.0/24 maxlen: 24 194.87.41.0/24 maxlen: 24 194.87.47.0/24 maxlen: 24 194.87.48.0/24 maxlen: 24 194.87.58.0/24 maxlen: 24 194.87.73.0/24 maxlen: 24 194.87.82.0/24 maxlen: 24 194.87.89.0/24 maxlen: 24 194.87.105.0/24 maxlen: 24 194.87.106.0/24 maxlen: 24 194.87.108.0/24 maxlen: 24 194.87.123.0/24 maxlen: 24 194.87.125.0/24 maxlen: 24 194.87.128.0/24 maxlen: 24 194.87.137.0/24 maxlen: 24 194.87.162.0/24 maxlen: 24 194.87.178.0/24 maxlen: 24 194.87.198.0/24 maxlen: 24 194.87.227.0/24 maxlen: 24 194.87.230.0/24 maxlen: 24 194.87.240.0/24 maxlen: 24 194.87.245.0/24 maxlen: 24 195.133.55.0/24 maxlen: 24 195.133.67.0/24 maxlen: 24 195.133.83.0/24 maxlen: 24 195.133.92.0/24 maxlen: 24 212.192.221.0/24 maxlen: 24 212.192.223.0/24 maxlen: 24 212.193.1.0/24 maxlen: 24 212.193.2.0/24 maxlen: 24 212.193.6.0/24 maxlen: 24 212.193.18.0/24 maxlen: 24 212.193.20.0/24 maxlen: 24 212.193.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:bd:15:7a:22:dd:90:66:e9:89:ad:92:09:05:f0:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Nov 13 10:22:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f3399989562c3898e359a9664e8370bf929e4ee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:83:08:c5:52:bf:c1:7b:9c:df:e0:cc:89:44: b2:63:da:7f:0f:c9:df:d0:a6:5e:2f:40:81:5e:6d: 81:50:5d:13:9d:e8:07:d4:61:c5:c6:21:a0:59:5c: 3c:07:87:ce:9c:10:8f:f9:8d:7b:06:4c:a9:14:32: b7:96:99:21:ba:84:34:86:59:49:cd:89:19:b2:c6: c5:9b:d0:39:e4:05:d4:6e:e1:87:76:c6:b5:48:95: b7:07:e8:8b:1c:04:8e:bb:6c:77:4b:32:4b:15:1f: f8:5f:3f:63:94:6a:4c:62:3e:54:84:98:10:d7:56: 62:b0:2b:45:6f:c9:8a:5b:f2:ad:c9:87:fb:7c:40: 74:d9:f8:10:3a:85:3e:4c:df:ba:9b:99:72:73:60: fb:fc:ea:7d:d8:d9:1d:a3:d7:4a:95:c1:b6:f8:52: 68:13:e1:4e:cb:3e:84:9c:24:a8:74:b9:f4:b3:d7: 3a:a9:78:03:98:77:3d:7c:9a:b8:55:fe:4c:e7:a3: e9:8b:53:12:36:ad:a7:68:5a:c6:08:fc:0b:22:62: 27:95:cd:c3:f4:9b:2e:61:9b:fc:a8:4d:ec:68:68: 2d:c2:38:f9:6f:10:e2:5c:20:ab:26:4e:4b:d8:7b: 35:50:e0:5e:1a:e0:d2:10:df:e8:de:85:57:b4:d2: e5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:39:99:89:56:2C:38:98:E3:59:A9:66:4E:83:70:BF:92:9E:4E:E4 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/8zmZiVYsOJjjWalmToNwv5KeTuQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.232.0/24 62.76.234.0/24 62.76.238.0/23 192.124.175.0-192.124.176.255 192.124.209.0/24 193.108.112.0/24 193.124.2.0/24 193.124.22.0/24 193.124.41.0/24 193.124.46.0/24 194.58.38.0-194.58.40.255 194.58.59.0/24 194.58.66.0/24 194.58.68.0/24 194.87.2.0/24 194.87.10.0/24 194.87.17.0-194.87.18.255 194.87.23.0/24 194.87.30.0/24 194.87.39.0/24 194.87.41.0/24 194.87.47.0-194.87.48.255 194.87.58.0/24 194.87.73.0/24 194.87.82.0/24 194.87.89.0/24 194.87.105.0-194.87.106.255 194.87.108.0/24 194.87.123.0/24 194.87.125.0/24 194.87.128.0/24 194.87.137.0/24 194.87.162.0/24 194.87.178.0/24 194.87.198.0/24 194.87.227.0/24 194.87.230.0/24 194.87.240.0/24 194.87.245.0/24 195.133.55.0/24 195.133.67.0/24 195.133.83.0/24 195.133.92.0/24 212.192.221.0/24 212.192.223.0/24 212.193.1.0-212.193.2.255 212.193.6.0/24 212.193.18.0/24 212.193.20.0/24 212.193.23.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:c6:49:a7:85:06:30:47:fc:08:95:c1:25:dc:79:e6:52:c3: 95:ce:12:86:ed:aa:9c:95:d4:4b:f8:91:e8:b6:02:96:23:0f: 6d:53:27:a1:22:91:ca:9c:1b:c9:97:16:88:25:d5:a5:dd:9b: ea:6f:65:67:77:bb:4b:7f:c1:a6:a2:2f:24:97:32:3c:4a:d9: 0d:68:8f:01:77:5b:5b:ce:b4:06:9e:73:3f:ba:67:4f:2a:51: 20:a0:b0:ae:42:28:6b:6d:b3:86:dc:d6:4b:a8:c7:49:a2:fd: cc:b1:61:a1:d4:1d:df:d7:d3:7c:09:b9:b1:b8:37:26:13:e5: 49:12:aa:12:06:3e:dc:4d:ca:5c:a4:6d:30:31:a0:41:7b:89: c3:cc:04:36:d0:1d:86:70:48:db:56:d9:d6:87:e2:db:0c:c3: 63:90:23:e9:68:7a:e8:03:9e:1e:99:b2:9c:26:b1:f5:5a:37: 8d:26:0a:c2:fd:d8:d8:f1:09:f6:ad:7c:27:d9:a0:2f:e4:02: b7:51:11:ce:a4:b6:a1:d5:f5:cb:98:d7:17:d1:9e:e3:06:f7: 6c:81:97:e2:48:8d:a7:d3:cb:1d:a9:cf:79:1c:ff:ca:ba:8f: 80:8f:2a:b1:0e:fc:0e:c3:ef:e3:e2:02:21:de:93:7a:1b:e8: 16:04:ca:f2 -----BEGIN CERTIFICATE----- MIIGXTCCBUWgAwIBAgISAZp8vRV6It2QZumJrZIJBfDBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMTEzMTAyMjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzM5OTk4OTU2MmMzODk4ZTM1OWE5NjY0ZTgzNzBiZjkyOWU0ZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYMIxVK/wXuc3+DMiUSyY9p/D8nf 0KZeL0CBXm2BUF0TnegH1GHFxiGgWVw8B4fOnBCP+Y17BkypFDK3lpkhuoQ0hllJ zYkZssbFm9A55AXUbuGHdsa1SJW3B+iLHASOu2x3SzJLFR/4Xz9jlGpMYj5UhJgQ 11ZisCtFb8mKW/KtyYf7fEB02fgQOoU+TN+6m5lyc2D7/Op92Nkdo9dKlcG2+FJo E+FOyz6EnCSodLn0s9c6qXgDmHc9fJq4Vf5M56Ppi1MSNq2naFrGCPwLImInlc3D 9JsuYZv8qE3saGgtwjj5bxDiXCCrJk5L2Hs1UOBeGuDSEN/o3oVXtNLlzQIDAQAB o4IDaTCCA2UwHQYDVR0OBBYEFPM5mYlWLDiY41mpZk6DcL+Snk7kMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvOHptWmlWWXNPSmpqV2FsbVRvTnd2NUtlVHVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBfQYIKwYBBQUHAQcBAf8EggFsMIIBaDCCAWQEAgABMIIB XAMEAD5M6AMEAD5M6gMEAT5M7jAMAwQAwHyvAwQAwHywAwQAwHzRAwQAwWxwAwQA wXwCAwQAwXwWAwQAwXwpAwQAwXwuMAwDBAHCOiYDBADCOigDBADCOjsDBADCOkID BADCOkQDBADCVwIDBADCVwowDAMEAMJXEQMEAMJXEgMEAMJXFwMEAMJXHgMEAMJX JwMEAMJXKTAMAwQAwlcvAwQAwlcwAwQAwlc6AwQAwldJAwQAwldSAwQAwldZMAwD BADCV2kDBADCV2oDBADCV2wDBADCV3sDBADCV30DBADCV4ADBADCV4kDBADCV6ID BADCV7IDBADCV8YDBADCV+MDBADCV+YDBADCV/ADBADCV/UDBADDhTcDBADDhUMD BADDhVMDBADDhVwDBADUwN0DBADUwN8wDAMEANTBAQMEANTBAgMEANTBBgMEANTB EgMEANTBFAMEANTBFzANBgkqhkiG9w0BAQsFAAOCAQEAK8ZJp4UGMEf8CJXBJdx5 5lLDlc4Shu2qnJXUS/iR6LYCliMPbVMnoSKRypwbyZcWiCXVpd2b6m9lZ3e7S3/B pqIvJJcyPErZDWiPAXdbW860Bp5zP7pnTypRIKCwrkIoa22zhtzWS6jHSaL9zLFh odQd39fTfAm5sbg3JhPlSRKqEgY+3E3KXKRtMDGgQXuJw8wENtAdhnBI21bZ1ofi 2wzDY5Aj6Wh66AOeHpmynCax9Vo3jSYKwv3Y2PEJ9q18J9mgL+QCt1ERzqS2odX1 y5jXF9Ge4wb3bIGX4kiNp9PLHanPeRz/yrqPgI8qsQ78DsPv4+ICId6TehvoFgTK 8g== -----END CERTIFICATE-----Generated at Fri Dec 5 16:35:47 2025 by rpki-client